/mandos/release : changes

» Changes from revision 24.1.23

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/release

From Revision 24.1.3 to 8

expand all

Rev	Summary	Authors	Date
24.1.3	merge merge	Björn Påhlsson	16 years ago
24.1.2	merge merge	Björn Påhlsson	16 years ago
24.1.1	Added syntax and support for plugbasedclient arguments and h... Added syntax and support for plugbasedclient arguments and how they are passed on to the plugins.	Björn Påhlsson	16 years ago
24	* Makefile (OPTIMIZE): New; optimize for size. * Makefile (OPTIMIZE): New; optimize for size. (CFLAGS): Use $(OPTIMIZE).	Teddy Hogeborn	16 years ago
23	merge merge	Teddy Hogeborn	16 years ago
22	* plugins.d/mandosclient.c (pgp_packet_decrypt): Cast "0" ar... * plugins.d/mandosclient.c (pgp_packet_decrypt): Cast "0" argument to gpgme_data_seek. (start_mandos_communication): Change "ip" arg to "const char *". New variable "written". Remove setsockopt. Bug fix: Do not change decrypted_buffer. (resolve_callback): Removed AVAHI_GCC_UNUSED from "interface".	Teddy Hogeborn	16 years ago
21	* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COV... * Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and $(LANGUAGE). (WARN, DEBUG, COVERAGE, LANGUAGE): New. (LDFLAGS): New; use $(COVERAGE) * plugbasedclient.c: Added copyright header. (process.buffer_size, process.buffer_length): Changed to "size_t". (main): Cast arguments to malloc and realloc. Detect read errors from processes. * mandosclient.c: Added copyright header. (interface): Moved to inside "main". (gpg_packet_decrypt): Renamed to "pgp_packet_decrypt"; all callers changed. Changed "new_packet_capacity" and "new_packet_length" to be ssize_t. Cast arguments to realloc. (debuggnutls): Attribute "level" argument as unused. (empty_log): Attribute "level" and "txt" arguments as unused. (start_mandos_communication): New argument "if_index". Bug fix: check ret, no tcp_sd, for errors from setsockopt. Use "if_index" directly instead of looking up the index. Loop around fwrite until all data is written. (resolve_callback): Attribute "txt", and "flags" as usused. Added default case to switch. Also show server host name. Call start_mandos_communication with "interface". (browse_callback): Added default case to switch. (main): Variable "interface" moved here. Cast "srand" argument. Bug fix: Call avahi_s_service_browser_new with index of "interface", not "eth0". * passprompt.c: Added copyright header. (termination_handler): Attribute "signum" argument as unused.	Teddy Hogeborn	16 years ago
20	Merge. Merge.	Teddy Hogeborn	16 years ago
19	* plugins.d/mandosclient.c (start_mandos_communcation): Rena... * plugins.d/mandosclient.c (start_mandos_communcation): Renamed to "start_mandos_communication"	Teddy Hogeborn	16 years ago
18	* plugins.d/Makefile: Removed * plugins.d/Makefile: Removed * plugins.d/mandosclient.c (start_mandos_communcation): Bug fix: write server IP address to "to" struct.	Teddy Hogeborn	16 years ago
17	Merge. Merge.	Teddy Hogeborn	16 years ago
16	* Makefile: Include targets for all binaries. * Makefile: Include targets for all binaries. * plugins.d/Makefile: Do nothing but call the parent Makefile. * server.py: Added copyright statement and information. (Client.__init__): Added doc string. (Client.stop): Bug fix: Only log message if stopping for the first time. Check if the "stop_initiator_tag" and "checker_initiator_tag" attributes exist before using them. (Client.__del__): Call self.stop() instead of doing things here. (Client.checker_callback): Set self.checker_callback_tag and self.checker to None unconditionally and immediately. (Client.stop_checker): Added some checks to handle multiple calls. (tcp_handler.handle): Use "self.server.clients" instead of "clients". (__main__): Moved all code to the "main" function. (main): New. New option "--address". Instantiate IPv6_TCPServer with "options.address". Log before starting main loop. (main.cleanup) Use "clients.pop()" to remove clients from the set as they are stopped.	Teddy Hogeborn	16 years ago
15	* mandos-clients.conf ([foo]): Uncommented. * mandos-clients.conf ([foo]): Uncommented. ([foo]/secret): New. ([foo]/secfile): Commented out. ([foo]/checker): Changed to "fping -q -- %%(fqdn)s". ([foo]/timeout): New. * server.py: New modeline for Python and Emacs. Set a logging format. (Client.__init__): Bug fix: Choose either the value from the options object or pass the argument through string_to_delta for both "timeout" and "interval". (Client.checker_callback): Bug fix: Do not log spurious "Checker for <foo> failed" messages. (Client.start_checker): Moved "Starting checker" log message down to just before actually starting the subprocess. Do not redirect the subprocesses' stdout to a pipe. (peer_certificate, fingerprint): Added docstrings. (entry_group_state_changed): Call "killme()" instead of "main_loop.quit()". (daemon, killme): New functions. (exitstatus, main_loop_started): New global variables. (__main__): Removed the "--cert", "--key", "--ca", and "--crl" options. Removed the sleep command from the default checker. Add a console logger in debug mode. Call "killme()" instead of "main_loop.quit()" when there are no more clients. Call "daemon()" if not in debug mode. Register "cleanup()" to run at exit. Ignore some signals. Catch DBusException to detect another running server and exit cleanly. Exit with "exitstatus". (cleanup): New function.	Teddy Hogeborn	16 years ago
14	Fixed a overbufferflow bug, thanks to a forgotten \0 Fixed a overbufferflow bug, thanks to a forgotten \0	Björn Påhlsson	16 years ago
13	Added following support: Added following support: Pluginbased client handler rewritten Mandos client Avahi instead of udp server discovery openpgp encrypted key support Passprompt stand alone application for direct console input Added logging for Mandos server	Björn Påhlsson	16 years ago
12	* mandos-clients.conf ([foo]/dn, [foo]/password, [braxen_cli... * mandos-clients.conf ([foo]/dn, [foo]/password, [braxen_client]/dn, [braxen_client]/password): Removed. ([foo]/fingerprint, [braxen_client]/fingerprint): New. ([foo]/checker): New. ([foo]/secfile): New. ([braxen_client]/secret): New. * server.py: New "--debug" option to set debug flag. Removed "cert", "key", "ca", "crl", and "cred" variables. Added default value for "checker" config file setting. Do not pass credentials to IPv6_TCPServer constructor. (debug): New global debug flag. Used by most debugging output code. (Client.__init__): Keyword argument "dn" replaced by "fingerprint", "password" renamed to "secret", and "passfile" renamed to "secfile". New keyword argument "checker". All callers changed. (Client.dn): Removed. (Client.fingerprint): New. (Client.password): Renamed to "secret"; all users changed. (Client.passfile): Renamed to "secfile"; all users changed. (Client.timeout, Client.interval): Changed to be properties; now automatically updates the "_timeout_milliseconds" and "_interval_milliseconds" values. (Client.timeout_milliseconds): Renamed to "_timeout_milliseconds". (Client.interval_milliseconds): Renamed to "_interval_milliseconds". (Client.check_command): New. (Client.start_checker): Use the new "check_command" attribute. (peer_certificate, fingerprint): New functions. (tcp_handler.handle): Use ClientSession with empty credentials object instead of ServerSession. Set gnutls priority string. Do not verify peer. Use fingerprint instead of DN when searching for clients. Bug fix: Loop sending data so even large secret data strings are sent. (IPv6_TCPServer.credentials): Removed. (if_nametoindex): Do not import ctypes since that is now imported globally.	Teddy Hogeborn	16 years ago
11	* server.py: Rewritten to use Zeroconf (mDNS/DNS-SD) in plac... * server.py: Rewritten to use Zeroconf (mDNS/DNS-SD) in place of the old broadcast-UDP-to-port-49001 method.	Teddy Hogeborn	16 years ago
10	* server.py: Bug fix: Do "from __future__ import division". * server.py: Bug fix: Do "from __future__ import division". (Client.__init__): Bug fix: parse interval string from config file. (Client.check_action): Take no arguments. Print some debugging output. Reset "checker" to None. (Client.start_checker): Sleep 10 seconds before pinging to alleviate debugging. (Client.next_stop): Bug fix: check if "last_seen" and/or "checker" is None. (Client.still_valid): Bug fix: check if "last_seen" is None. (Client.handle): When finding the right password to send, use a list comprehension and an index lookup instead of a generator expression to a dict. (IPv6_TCPServer.request_queue_size): Removed. (in6addr_any): Moved inside "main". (main): Changed "clients" to be a Set instead of a list. Bug fix: Exit when/if all clients are removed. Call "select" with all client checkers and a suitable timeout. Add some debugging output. Start new checkers when needed and delete clients which have timed out.	Teddy Hogeborn	16 years ago
9	* client.cpp (main): Get t_old early since it is used on err... * client.cpp (main): Get t_old early since it is used on error exits. * server.py (Client.checker): New attribute. (Client.check_action, Client.start_checker, Client.stop_checker, Client.fileno, Client.next_stop, Client.still_valid, Client.it_is_time_to_check): New methods. (Client.handle_request): Alias to "check_action". (main): Stop all started checkers on exit. Exit cleanly on keyboard interrupt.	Teddy Hogeborn	16 years ago
8	* Makefile (client_debug): Bug fix; add quotes and / to CERT... * Makefile (client_debug): Bug fix; add quotes and / to CERT_ROOT. * server.py (cred): Removed; no need for a global variable.	Teddy Hogeborn	16 years ago